Data Processing Addendum

This Addendum applies where FlowAcq processes personal data on your behalf in connection with the Services. It forms part of your agreement with FlowAcq.

Roles

For data you submit through the Services, you act as the controller and FlowAcq acts as a processor, processing personal data only on your documented instructions and to provide the Services.

Scope of processing

• Subject matter: payment orchestration and related operations.
• Data subjects: your customers and authorized users.
• Data types: contact and transaction data; tokenized instruments, not raw card numbers.

Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, signed webhooks, access controls, and audit logging.

Subprocessors

We use vetted subprocessors (payment providers and infrastructure) to deliver the Services and remain responsible for their compliance with this Addendum.

International transfers

Where personal data is transferred across borders, we rely on appropriate safeguards as required by applicable law.

Assistance & deletion

We assist you with data-subject requests and security obligations, and delete or return personal data at the end of the engagement, subject to legal retention.

Contact

To request a signed copy or ask a question, contact us.

This is a working draft provided for completeness. It will be replaced with finalized, counsel-reviewed terms before launch — please don't rely on it yet.